Configure SSH access to Fortinium host
SUMMARY
A fortinium host is configured to only allow SSH access to Fortinium support.
RESOLUTION
To allow IP addresses or DNS names (will be resolved on every restart of the host service), you can set the following VARIABLE on the host (comma separated):
- ALLOW_SSH_FOR_IP = <ip>,<fqdn>,<cidr>
e.g.
ALLOW_SSH_FOR_IP="212.68.3.87,myhome.fortinium.net,57.8.197.62,192.168.10.0/24"
This will automatically remove access to Fortinium support.
To disallow any access, set the following VARIABLE on the host (comma separated):
To reset it, so that only Fortinium support can access it, remove the VARIABLE completely
Related Articles
Change API host (dev)
SUMMARY A fortinium host is configured to communicate to the default api server (https://api.fortinium.com). RESOLUTION To change this (for dev purposes only!), you can set the following VARIABLE on the host: APIURL="https://mydevhost.fortinium.net"
Set container image (channel) host wide
SUMMARY By default the latest image will be installed. If it is necessary to set the image for all new created containers, it can be done with a host VARIABLE RESOLUTION To specify a certain image, you can set the following VARIABLE on the host: ...
Disable Automatic Updates
SUMMARY A Fortinium host is configured to update it's software (OS and Fortinium software) on every OS start. RESOLUTION To prevent this, you can set the following VARIABLE on the host: DISABLE_UPDATES=1